Privacy Policy
Last updated: 27 April 2026
AndTu Safari ("AndTu Safari", "we", "us", or "our") is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains what personal data we collect when you use the website www.andtusafari.com (the "Website") or book a safari with us, how we use that data, who we share it with, and the rights you have in relation to it.
This Policy is issued in accordance with the Kenya Data Protection Act, 2019 and applies to all visitors to the Website and all clients of AndTu Safari.
Who We Are
AndTu Safari is the data controller responsible for your personal data.
Address: Rasi Gardens, Argwings Kodhek Road, Hurlingham, Nairobi, Kenya
Postal address: P.O. Box 100100-00100, Nairobi
Email: contact@andtusafari.com
Website: www.andtusafari.com
Personal Data We Collect
We collect personal data that you provide directly to us, as well as certain information collected automatically when you use our Website.
Information you provide to us
When you submit a booking form, contact us, or subscribe to our newsletter, we may collect:
• full name and title;
• email address and telephone number;
• country of residence and postal address;
• nationality, passport number, date of birth, and passport expiry date (where required for park permits, lodge bookings, or domestic flights);
• travel dates, party composition, and accommodation preferences;
• dietary requirements, medical conditions, allergies, and other special requirements you choose to disclose so that we can deliver the Services safely;
• emergency contact details;
• any other information you choose to share with us in correspondence.
Payment information
Payments for our services are processed by a third-party payment processor (such as Stripe). Your full payment card details are entered directly with the payment processor and are not stored on our systems. We receive only limited transaction information, such as confirmation of payment, the last four digits of the card, and the cardholder name.
Information collected automatically
When you visit the Website, we and our analytics providers may automatically collect:
• IP address and approximate location;
• device type, operating system, and browser type;
• pages visited, time spent on pages, and referring website;
• date and time of access.
This information is collected through cookies and similar technologies (see Section 7).
How We Use Your Personal Data
We use your personal data for the following purposes:
• To respond to your enquiries and provide quotations for safari packages.
• To process and manage your booking, including making reservations with lodges, camps, parks, and other suppliers, arranging transport, and issuing booking confirmations.
• To process payments through our third-party payment processor.
• To communicate with you about your booking, including pre-departure information, itinerary changes, and post-trip follow-up.
• To ensure your safety and well-being during your safari, including responding to medical or emergency situations.
• To send you marketing communications, such as newsletters, special offers, and information about new safaris, where you have subscribed or otherwise consented to receive them. You can unsubscribe at any time.
• To improve our Website and services, including through analytics about how visitors use the Website.
• To comply with legal obligations, including tax, accounting, and regulatory requirements in Kenya.
• To protect our rights, for example to detect, prevent, and respond to fraud or misuse of the Website.
Legal Basis for Processing
Under the Kenya Data Protection Act, 2019, and where applicable other data protection laws, we rely on the following legal bases to process your personal data:
Performance of a contract: to process your booking and deliver the Services you have requested.
Consent: where you have given us specific consent, for example to send you marketing emails or to process sensitive information such as health or dietary requirements.
Legitimate interests: to operate, secure, and improve our Website and our business, in a manner that does not override your rights and freedoms.
Legal obligation: where we are required to retain or disclose information by law.
Sharing Your Personal Data
To provide our Services, we share your personal data with selected third parties, including:
• lodges, camps, hotels, and other accommodation providers;
• airlines, charter operators, and ground transport providers;
• national parks, reserves, and conservancies that require visitor information for permits;
• guides and other service providers engaged for your safari;
• our payment processor (e.g., Stripe) and our banks;
• our IT, hosting, email, and analytics providers (including Google Analytics);
• our newsletter and marketing email provider;
• professional advisers (such as lawyers, accountants, and insurers); and
• competent authorities, where disclosure is required by law.
We share only the data that is necessary for these third parties to perform their function and we require them to handle your data securely and only for the purposes for which it was shared.
We do not sell your personal data to any third party.
International Transfers
As an international booking business, we may transfer your personal data outside Kenya, for example to suppliers in other countries on your itinerary, or to service providers based abroad (including providers of payment processing, email, hosting, and analytics).
Where we transfer personal data outside Kenya, we take reasonable steps to ensure that an adequate level of protection is in place, in accordance with the Kenya Data Protection Act, 2019, including by relying on appropriate safeguards or your explicit consent where required.
Cookies and Analytics
Our Website uses cookies and similar technologies. A cookie is a small text file placed on your device when you visit a website.
We use the following categories of cookies:
Strictly necessary cookies: required for the Website to function (for example, to remember your form inputs or session).
Analytics cookies: we use Google Analytics to understand how visitors use the Website, which pages are most viewed, and how we can improve the user experience. Google Analytics may set cookies and process information about your visit. For more information, please see Google's privacy policy at https://policies.google.com/privacy.
You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Website.
Marketing Communications
If you have subscribed to our newsletter or have otherwise opted in to receive marketing communications, we will send you periodic emails about safari packages, special offers, travel tips, and other content we believe may interest you.
You can withdraw your consent and unsubscribe at any time by:
• clicking the "unsubscribe" link at the bottom of any marketing email; or
• emailing us at contact@andtusafari.com.
Withdrawing your consent to marketing does not affect our ability to contact you about an existing or upcoming booking.
How Long We Keep Your Data
We retain your personal data only for as long as is necessary for the purposes set out in this Policy, including:
• for the duration of our customer relationship with you;
• for as long as required to comply with our legal, accounting, and tax obligations under Kenyan law (typically up to seven years after the end of the relevant financial year);
• for newsletter subscribers, until you unsubscribe; and
• for general enquiries that do not result in a booking, for a reasonable period (normally up to two years) after our last contact.
When personal data is no longer required, we will securely delete or anonymize it.
Security
We implement appropriate technical and organizational measures designed to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include access controls, encrypted connections to our Website, and the use of reputable service providers.
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security.
Your Rights
Subject to applicable law, including the Kenya Data Protection Act, 2019, you have the following rights in relation to your personal data:
• Right to be informed about how your personal data is processed.
• Right of access to a copy of the personal data we hold about you.
• Right to rectification of inaccurate or incomplete personal data.
• Right to erasure of your personal data in certain circumstances.
• Right to restrict processing of your personal data in certain circumstances.
• Right to object to processing based on our legitimate interests, including direct marketing.
• Right to data portability in respect of data you have provided to us.
• Right to withdraw consent at any time, where our processing is based on consent.
To exercise any of these rights, please contact us at contact@andtusafari.com. We may need to verify your identity before responding to your request.
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya (www.odpc.go.ke).
Children's Privacy
Our Website and services are intended for adults. We do not knowingly collect personal data directly from children under the age of 18. Where children form part of a booking, their data is provided to us by the responsible adult making the booking, who confirms that they are authorized to share that information.
Third-Party Links
The Website may contain links to third-party websites (for example, lodge or park websites). We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any third-party site you visit.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our Website with an updated "Last updated" date. Material changes will be communicated to clients with active bookings or active newsletter subscriptions where appropriate.
Contact Us
If you have any questions, comments, or requests regarding this Privacy Policy or your personal data, please contact us:
AndTu Safari
Rasi Gardens, Argwings Kodhek Road, Hurlingham, Nairobi, Kenya
P.O. Box 100100-00100, Nairobi
Email: contact@andtusafari.com
Website: www.andtusafari.com